Legal notice

Security & Payment Policy

1. Website Security

The Website is served over an encrypted HTTPS connection using SSL/TLS, which protects data transmitted between your browser and our servers from being intercepted in transit. We deploy industry-standard technical safeguards, including firewalls, restricted administrative access, and periodic security reviews, to guard against unauthorised access, alteration, or destruction of the information collected through the Website.

While we take every reasonable step to keep the Website secure, no system connected to the internet can be guaranteed to be completely free of risk. We encourage you to use updated browsers and devices, avoid public or unsecured Wi-Fi for transactions, and never share your login credentials or One-Time Passwords (OTPs) with anyone, including individuals claiming to represent SoulPro.

2. Accepted Payment Methods

We currently support the following payment options at checkout, subject to availability and any limits set by your bank or wallet provider:

Credit Cards and Debit Cards (Visa, Mastercard)
UPI (Unified Payments Interface)
Net Banking across major Indian banks
Digital wallets, where enabled at checkout
Cash on Delivery (COD), where available for your pin code

Available payment options may vary by order value, delivery location, or promotional eligibility, and will be clearly displayed to you at checkout.

3. Payment Gateway Partners

All online payments on the Website are processed through Reserve Bank of India (RBI)-approved, PCI-DSS compliant payment gateway partners. These gateways act as a secure intermediary between the Website, your bank or card network, and the payment networks, validating and authorising each transaction in real time.

Our payment gateway partners maintain their own privacy policies, security disclosures, and terms of service governing how they handle your payment data. We recommend reviewing those documents on the respective gateway's website for details specific to how they process and protect your payment information.

4. Do We Store Your Card Details?

No. SoulPro does not store, process, or have access to your full credit card, debit card, or net banking credentials at any point during a transaction. This information is captured directly by our payment gateway partner through a secure, encrypted form and is transmitted straight to the relevant bank or card network for authorisation.

If a gateway offers you the option to save your card for faster future checkout, that information is stored by the gateway (or the card network, in tokenised form as described in Section 5) based on your explicit consent given directly to them — never on SoulPro's own servers.

5. Card Tokenisation (RBI Guidelines)

In accordance with RBI's Card-on-File Tokenisation (CoFT) framework, merchants and payment aggregators in India are required to replace stored card numbers with a unique "token" for any card you choose to save for future use. This means that even where a card is saved for your convenience, the actual 16-digit card number is not held by SoulPro or, in most cases, even by the payment gateway — only an encrypted token linked to your card and device is retained, which cannot be reverse-engineered to reveal your card number.

6. PCI-DSS Compliance

Our payment gateway partners are certified as compliant with the Payment Card Industry Data Security Standard (PCI-DSS) — a global benchmark of security requirements established to ensure that any entity that accepts, processes, stores, or transmits card information maintains a secure environment. PCI-DSS compliance is independently audited and covers areas such as network security, encryption of cardholder data, access control, and regular security testing.

7. Account Security & Your Responsibilities

Your SoulPro account is protected by a password that you set at the time of registration. You are responsible for keeping this password confidential and for all activity that occurs under your account. We recommend that you:

Choose a strong, unique password that you do not reuse across other websites;
Never share your password or account OTP with anyone, including anyone claiming to be from SoulPro customer support (we will never ask for your OTP or password over call, SMS, or email);
Log out of your account when using a shared or public device; and
Notify us immediately at the contact details in Section 14 if you notice any unauthorised activity on your account.

8. Fraud Prevention & Transaction Monitoring

We work with our payment gateway partners to monitor transactions for signs of fraud, such as unusual order patterns, mismatched billing/delivery details, or repeated failed payment attempts. Orders flagged as potentially fraudulent or high-risk may be held for manual verification, and we may reach out to you to confirm order details before dispatch. We reserve the right to cancel and refund any order that we reasonably believe to be fraudulent.

9. Data Storage & Access Controls

Personal data collected through the Website (such as your name, address, and order history) is stored on secure servers with restricted access limited to authorised personnel who need it to perform their role, such as order processing or customer support. Access to sensitive systems is controlled and logged, and we periodically review access rights to reduce the risk of internal misuse.

For more detail on how we collect, use, and retain your personal data, please refer to our Privacy Policy.

10. Data Breach Response

In the unlikely event that we become aware of a data breach that compromises your personal data in a manner that poses a risk to you, we will take prompt steps to contain and investigate the incident, and will notify affected users and, where required, the relevant regulatory authority (such as the Indian Computer Emergency Response Team, CERT-In, and/or the Data Protection Board of India under the DPDP Act), in accordance with applicable timelines and requirements under Indian law.

11. Third-Party & Logistics Partner Security

Where we share limited information with logistics, warehousing, or fulfilment partners to deliver your order, we require such partners to handle your data responsibly and use it only for the purpose of completing your delivery. We do not authorise these partners to use your information for any unrelated marketing or commercial purpose.

12. Reporting a Security Concern

If you discover a potential security vulnerability on the Website, notice suspicious activity on your account, or believe you have received a phishing communication impersonating SoulPro, please report it to us immediately at the email address in Section 14. Please avoid publicly disclosing any vulnerability until we have had a reasonable opportunity to investigate and address it.

13. Changes to This Policy

We may update this Security & Payment Policy periodically to reflect changes in our security practices, payment infrastructure, or applicable law. The revised Policy will be posted on this page with an updated "Last Updated" date. We encourage you to review this page from time to time.

14. Contact Information

For any questions about this Policy, a payment issue, or to report a security concern, please reach out using the details below:

Company Name	XPAND VENTUREZ PRIVATE LIMITED
Brand	SoulPro
Customer Support Email	support@gosoulpro.com
Working Hours	Monday–Friday, 10:00 AM – 6:00 PM (IST)